Systems and methods for cryptographic authentication of contactless cards

Abstract

Example embodiments of systems and methods for contactless card verification include a contactless card including a substrate, a processor, and a memory, wherein the memory contains a first applet and a second applet, and a recipient device in data communication with the contactless card, wherein the second applet is configured to retrieve one or more parameters from the first applet via an interface; and wherein the second applet is configured to transmit the one or more parameters to the recipient device for verification.

What is claimed is: 
     
       1. A contactless card communication system comprising:
 a contactless card including a substrate, a processor, and a memory containing a first applet, a second applet, and one or more additional applets, wherein: 
 the first applet is configured to access one or more parameters, 
 the first applet is precluded from data communication external to the contactless card by the second applet, and 
 each of the one or more additional applets includes offline verification data associated with a user of the contactless card; and 
 a recipient application comprising instructions for execution on a recipient device, the recipient application in data communication with the contactless card via the second applet, 
 wherein the second applet is configured to retrieve one or more parameters from the first applet via a communication interface, 
 wherein the second applet is configured to transmit the one or more parameters to the recipient application, and 
 wherein at least a portion of the offline verification data from each of the one or more additional applets is matched for verification. 
 
     
     
       2. The contactless card communication system of  claim 1 , wherein
 the first applet is associated with a first applet identifier and the second applet is associated with a second applet identifier; 
 the first applet and the second applet are behind a common firewall; and 
 the interface comprises a secure, shareable interface configured to communicate the one or more parameters between the first applet and the second applet using the applet identifiers. 
 
     
     
       3. The contactless card communication system of  claim 2 , wherein the one or more parameters include a credit limit and a transaction counter. 
     
     
       4. The contactless card communication system of  claim 3 , wherein the one or more
 parameters include the counter; and 
 the contactless card is configured to update the counter based on a failed read attempt of the contactless card. 
 
     
     
       5. The contactless card communication system of  claim 4 , wherein the second applet is configured not to transmit the one or more parameters to the recipient application if the counter exceeds a threshold. 
     
     
       6. The contactless card communication system of  claim 3 , wherein the one or more parameters include at least one of a credit limit, a primary account number sequence number, a card verification number, a signature, an expiration date, a chip verification code, and a personal identification number, and information relating to the most recent transaction involving the contactless card. 
     
     
       7. The contactless card communication system of  claim 3 , wherein the contactless card is at least one of a building access card, a credit card, a debit card, an identification card, a loyalty program card, and a transportation card. 
     
     
       8. The contactless card communication system of  claim 1 , wherein upon receipt of the one or more parameters, the recipient application is configured to match the one or more parameters with information accessible to the recipient application to determine a verification result. 
     
     
       9. The contactless card communication system of  claim 1 , wherein:
 the recipient application is in data communication with a server and configured to transmit the one or more parameters to the server, and 
 the server is configured to match the one or more parameters with information accessible to the recipient application to determine a verification result. 
 
     
     
       10. A method of communicating with a contactless card comprising:
 establishing communication via an interface between a first applet and a second applet contained in a memory of a contactless card; 
 precluding, by the second applet, communication external to the contactless card by the first applet; 
 retrieving, by the second applet, verification data from the first applet via the interface; 
 retrieving, by the second applet, offline verification data associated with a user of the contactless card from one or more additional applets; 
 establishing communication between the second applet and a recipient application; 
 transmitting the verification data from the second applet to the recipient application via one or more shareable objects; 
 authenticating the verification data by the recipient application; and 
 matching at least a portion of the offline verification data from each of the one or more additional applets for verification. 
 
     
     
       11. The method of communicating with a contactless card of  claim 10 , wherein the verification data is offline data stored by the contactless card. 
     
     
       12. The method of communicating with a contactless card of  claim 10 , wherein
 the verification data includes the counter; and 
 the counter is configured to update based on a failed read attempt of the contactless card. 
 
     
     
       13. The method of communicating with a contactless card of  claim 12 , wherein the verification data further includes a credit limit, a counter, a unique card identifier, a primary account number sequence number, a card verification number, a signature, an expiration date, a chip verification code, and a personal identification number. 
     
     
       14. The method of communicating with a contactless card of  claim 12 , wherein the second applet is configured to transmit the verification data to the recipient device if the counter is below a threshold. 
     
     
       15. The method of communicating with a contactless card of  claim 10 , wherein authenticating the verification data comprises:
 comparing the verification data transmitted by the second applet to the verification data accessible to the recipient application; and 
 verifying the contactless card if the verification data transmitted by the second applet matches the verification data accessible to the recipient application. 
 
     
     
       16. The method of communicating with a contactless card of  claim 10 , further comprising establishing communication between one or more additional applets contained in a memory of the contactless card, wherein each of the one or more additional applet includes offline verification data associated with a user of the contactless card. 
     
     
       17. A contactless card comprising:
 a substrate; 
 a memory containing a first applet, a second applet, and one or more additional applets including offline verification data, wherein the offline verification data is accessible to the first applet; 
 an interface; and 
 a processor in communication with the memory and the interface, 
 wherein the second applet is configured to retrieve one or more parameters from the first applet via the interface for verification, 
 wherein the first applet is precluded from communication external to the contactless card by the second applet, and 
 wherein at least a portion of the offline verification data included in the one or more additional applets is matched for verification.